CMOD permissions for /data and /uploads
This goes for both Photopost Pro and Photopost Classifieds. Im trying to lock down my site with better security and I noticed my template folders/files were compromised recently with the Yahoo Counter trojan. I have since CMOD'd other folders to 755 and files to 644. Right now my /uploads and /data folders are 777. Can (should) I make these folders 755 and subfolders (thumbs etc)? And can I make all the images 644? Ive made all my other Post/Classified folders 755 and most files 644 and have not run into any issues yet.
Whats the default when new photos or classifieds are posted? And if these files and/or folders must be 777, why?